PSA: Patch your Plex media server before someone hacks it
Summary
Hackers are actively attacking Plex Media Server by exploiting recent security weaknesses. These attacks install malware that can mine cryptocurrency or turn devices into proxy servers used for hiding internet activity.Key Facts
- Plex fixed four security problems in their media server software recently.
- Researchers found five weaknesses, with one rated very serious (8.6 out of 10).
- A researcher created a “Plex2Shell” exploit using four vulnerabilities to run harmful code remotely.
- A honeypot (a fake server) detected real attacks happening quickly after the exploit was public.
- The installed malware includes cryptominers and software that turns devices into proxies for anonymous internet use.
- The exploit was developed using artificial intelligence to speed up the complex hacking process.
- Plex users should update to version 1.43.3 immediately to stay safe.
- Users are advised to secure their servers by limiting internet access, using strong passwords, and secure apps.
Read the Full Article
This is a fact-based summary from The Actual News. Click below to read the complete story directly from the original source.